CVE-2012-1626
Published Sep 20, 2012SQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer Date Tool…
Vendor archive
karen_stevenson CVEs
Beta · best-effort5 CVEs tagged to vendor karen_stevenson — 0 Critical, 0 High, 2 Medium, 3 Low, 0 Unrated.
CVE-2010-2352
Published Jun 21, 2010The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11 and 6.x before 6.x-2.7 for Drupal does not perform access checks before displaying reference…
CVE-2009-3157
Published Sep 10, 2009Cross-site scripting (XSS) vulnerability in the Calendar module 6.x before 6.x-2.2 for Drupal allows remote authenticated users, with "create new content types" privileges, to inj…
CVE-2009-3156
Published Sep 10, 2009Cross-site scripting (XSS) vulnerability in the Date Tools sub-module in the Date module 6.x before 6.x-2.3 for Drupal allows remote authenticated users, with "use date tools" or…
CVE-2008-6972
Published Aug 13, 2009Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit (CCK) 5.x through 5.x-1.8 allow remote authenticated users with "administer content" permiss…
Showing 1-5 of 5 CVEsPage 1 of 1